Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer
File: CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer (raw, json)
Hash identifier: NKYm+5rH9bsixFVin6EMeIZjfGCtzZgeFriqzixrO7c=
Subject key identifier: 08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01889B2AC0807C292F7F5E49637A17E985D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Jun 2023 13:20:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210883
IP: 185.147.55.0/24
IP: 2a11:4280::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:2a:c0:80:7c:29:2f:7f:5e:49:63:7a:17:e9:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 13:20:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0893bff9f6ed42d9058987140aa711c3b125a981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:a0:94:05:66:99:31:c9:a1:f9:25:d2:96:
47:b8:da:e6:11:a1:81:54:dc:29:4c:47:71:4a:15:
29:2d:ed:b1:d2:16:07:a4:b2:1b:10:c8:57:41:37:
a9:5d:94:57:90:09:b7:81:1d:7a:dc:c1:3f:c0:9d:
d6:c1:ce:07:ad:77:5a:1f:80:25:ed:4c:8b:73:b9:
cf:f5:2f:d6:6b:61:6f:18:a8:ff:5f:eb:30:d6:57:
33:83:cb:de:3c:88:56:18:cf:b7:5e:64:34:b1:88:
3f:f0:d8:21:e0:30:d0:1e:54:1c:e7:35:4f:5b:da:
3f:3e:f8:12:24:d3:a7:c7:fd:af:f9:07:fa:a1:ec:
82:9b:58:3b:8f:7c:63:3e:ac:60:39:e7:6f:0c:f9:
79:32:3a:bd:9f:8d:58:44:9d:fc:55:7c:4d:eb:da:
7f:70:e1:9c:b9:f0:58:10:c9:12:07:73:07:84:56:
30:77:38:1c:34:af:99:e1:c1:12:14:8b:de:77:c5:
c0:6b:de:38:41:5e:06:3b:44:57:6b:49:71:18:f8:
8e:8c:51:e7:7a:16:a5:1d:6d:d9:cb:b1:da:5c:4c:
12:a1:26:b0:8b:0b:08:77:59:76:8c:98:de:ab:50:
83:33:45:cc:1e:ef:c7:96:f2:d0:56:aa:3c:2e:7c:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.55.0/24
IPv6:
2a11:4280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210883
Signature Algorithm: sha256WithRSAEncryption
98:ae:ca:2d:f9:04:d3:20:08:43:a9:56:a7:6d:06:7f:be:7a:
98:e4:87:d3:c3:8c:7b:fc:5b:6a:98:cd:76:ef:c8:bb:ee:79:
3d:2d:67:46:9d:72:43:7e:04:a1:82:5d:b9:36:d8:4d:69:d2:
ee:34:cf:ba:a5:c5:47:36:9e:0a:c7:0c:c2:5b:b6:3f:2a:2a:
7e:8a:d6:4e:00:28:dd:97:54:2e:f2:35:0f:65:49:8d:4a:e4:
66:20:b7:96:37:8d:2d:95:51:8a:66:db:bb:47:11:6d:96:10:
08:d1:de:d3:44:d3:51:a4:aa:01:5b:e2:85:d5:1f:34:74:2c:
03:71:89:cd:d4:09:32:db:0c:1e:d0:80:54:79:ed:86:42:e0:
7f:de:0b:86:86:fb:f3:d4:42:f5:93:63:6e:37:24:c2:ab:d1:
c9:b9:72:39:cf:9a:ad:65:a9:87:f0:a4:31:f1:f8:8a:2a:90:
7d:de:a7:a8:0d:2c:d3:14:cb:59:80:da:c0:a6:75:f5:3b:2b:
d6:d3:ea:cc:c6:1a:2b:d0:73:2c:49:82:87:12:b8:29:74:90:
1b:98:92:a0:60:42:13:97:48:bb:8b:60:4c:a0:93:22:70:52:
cb:17:4b:a4:38:98:6b:18:61:5d:08:76:75:df:8e:66:76:b7:
43:2d:4a:b3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAYibKsCAfCkvf15JY3oX6YXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjA4MTMyMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODkzYmZmOWY2ZWQ0MmQ5MDU4OTg3MTQwYWE3MTFjM2IxMjVhOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwCglAVmmTHJofkl0pZHuNrmEaGB
VNwpTEdxShUpLe2x0hYHpLIbEMhXQTepXZRXkAm3gR163ME/wJ3Wwc4HrXdaH4Al
7UyLc7nP9S/Wa2FvGKj/X+sw1lczg8vePIhWGM+3XmQ0sYg/8Ngh4DDQHlQc5zVP
W9o/PvgSJNOnx/2v+Qf6oeyCm1g7j3xjPqxgOedvDPl5Mjq9n41YRJ38VXxN69p/
cOGcufBYEMkSB3MHhFYwdzgcNK+Z4cESFIved8XAa944QV4GO0RXa0lxGPiOjFHn
ehalHW3Zy7HaXEwSoSawiwsId1l2jJjeq1CDM0XMHu/HlvLQVqo8LnxTQwIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFAiTv/n27ULZBYmHFAqnEcOxJamBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNzMz
MzE1LWJkYWQtNGE3Ni1hYzgwLTNmNzg3ZmM4M2ZjYi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWM3
MzMzMTUtYmRhZC00YTc2LWFjODAtM2Y3ODdmYzgzZmNiLzAvMDg5M0JGRjlGNkVE
NDJEOTA1ODk4NzE0MEFBNzExQzNCMTI1QTk4MS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME
ALmTNzANBAIAAjAHAwUDKhFCgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDN8Mw
DQYJKoZIhvcNAQELBQADggEBAJiuyi35BNMgCEOpVqdtBn++epjkh9PDjHv8W2qY
zXbvyLvueT0tZ0adckN+BKGCXbk22E1p0u40z7qlxUc2ngrHDMJbtj8qKn6K1k4A
KN2XVC7yNQ9lSY1K5GYgt5Y3jS2VUYpm27tHEW2WEAjR3tNE01GkqgFb4oXVHzR0
LANxic3UCTLbDB7QgFR57YZC4H/eC4aG+/PUQvWTY243JMKr0cm5cjnPmq1lqYfw
pDHx+IoqkH3ep6gNLNMUy1mA2sCmdfU7K9bT6szGGivQcyxJgocSuCl0kBuYkqBg
QhOXSLuLYEygkyJwUssXS6Q4mGsYYV0IdnXfjmZ2t0MtSrM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-fra.rpki-client.org